pandao/editor.md

pandao/editor.md

on GitHub

20 releases

new releases every 6 days 6 hours

last release was 06/09/2015

last checked yesterday at 10:26 PM

13562

The open source embeddable online markdown editor (component).

Log in to subscribe

CVE History

CVE	Published	CVSS v2	CVSS v3
CVE-2020-19660	May 8, 2023	6.1 MEDIUM	N/A
Cross Site Scripting (XSS) pandao editor.md 1.5.0 allows attackers to execute arbitrary code via crafted linked url values.
CVE-2023-29641	May 1, 2023	6.1 MEDIUM	N/A
Cross Site Scripting (XSS) vulnerability in pandao editor.md thru 1.5.0 allows attackers to inject arbitrary web script or HTML via crafted markdown text.
CVE-2020-19697	April 4, 2023	6.1 MEDIUM	N/A
Cross Site Scripting vulnerability found in Pandao Editor.md v.1.5.0 allows a remote attacker to execute arbitrary code via a crafted script in the <iframe>src parameter.
CVE-2020-19698	April 4, 2023	6.1 MEDIUM	N/A
Cross Site Scripting vulnerability found in Pandao Editor.md v.1.5.0 allows a remote attacker to execute arbitrary code via a crafted script to the editor parameter.
CVE-2019-14653	August 3, 2019	6.1 MEDIUM	4.3 MEDIUM
pandao Editor.md 1.5.0 allows XSS via an attribute of an ABBR or SUP element.
CVE-2019-14517	August 1, 2019	6.1 MEDIUM	4.3 MEDIUM
pandao Editor.md 1.5.0 allows XSS via the Javascript: string.
CVE-2019-9737	March 13, 2019	6.1 MEDIUM	4.3 MEDIUM
Editor.md 1.5.0 has DOM-based XSS via vectors involving the '<EMBED SRC="data:image/svg+xml' substring.
CVE-2018-19056	November 7, 2018	6.1 MEDIUM	4.3 MEDIUM
pandao Editor.md 1.5.0 has DOM XSS via input starting with a "<<" substring, which is mishandled during construction of an A element.
CVE-2018-16330	September 2, 2018	6.1 MEDIUM	4.3 MEDIUM
Pandao Editor.md 1.5.0 allows XSS via crafted attributes of an invalid IMG element.